Rob Crittenden be00e95da5 Add OS_CACERT to userrc_early and ensure SERVICE_HOST is SAN ...

OS_CACERT was being added directly to the environment rather
than usercc_early. This caused an untrusted CA error to be
thrown.

Ensure that SERVICE_HOST is in the Subject Alt. Names of the
issued TLS server cert. The gate sets it to 127.0.0.1 which
wasn't being handled. Only the FQDN of the host and actual
IP address of the machine were being added.

Change-Id: I8a91dffe1a5263d2bcc99ea406a8556045b52be2

2016-03-28 10:00:52 -04:00

13 KiB

Raw Blame History

View Raw